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DOCUMENT-IDENTIFIER: JP 02291043 A 

TITLE: METHOD FOR SIGNATURE AND CERTIFICATION IN DIGITAL SYSTEM 
PUBN-DATE: November 30, 1990 



INVENTOR-INFORMATION: 
NAME 
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INT-CL (IPC): G06F 15/00; G06F 15/30; G09C 1/00; H04L 9/32 
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L9: Entry 2 of 7 File: DWPI Oct 1, 1997 

DERWENT-ACC-NO: 1997-473617 
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File: JPAB 
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PUB-NO: JP402291043A 

DOCUMENT- IDENTIFIER: JP 02291043 A 

TITLE: METHOD FOR SIGNATURE AND CERTIFICATION IN DIGITAL SYSTEM 
PUBN-DATE: November 30, 1990 



INVENTOR-INFORMATION: 
NAME 

FISCHER, ADDISON M 



COUNTRY 



INT-CL (IPC): G06F 15/00; G06F 15/30; G09C 1/00; H04L 9/32 
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□ 10. Document ID: EP 651554 Al 
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L6: Entry 1 of 1 File: USPT Jan 13, 1998 

DOCUMENT-IDENTIFIER: US 5708709 A 

TITLE: System and met hod" for managing try-and-buy usage of application programs 



Detailed Description Text (17): 

In reference to FIG. 3, a schematic illustration of the Server Format 180 of an 
Application Program trial version 138 is shown. The Server Format includes the non- 
encrypted application program 181, and may optionally 'include information fields 
for Application ID 183, License Termination Date 185, and Licensee ID 184. These 
files are optional because prior to selection by a particular user, the file is 
generic for all potential users and no such Information (except the Application ID) 
is applicable to the application program file. The particularized server format 
includes each of the Application ID 183, License Termination Date 185, and Licensee 
ID 184 fields and may either be created and stored as an actual file on the server 
or may exist only transiently as the generic server format is< particularized to the 
requesting user and encrypted to generate the transmission format prior to 
transmission to the client computer. Note that the server^ formatted version of the 
application program could be stored in an encrypted formf' but decryption followed 
by encryption would be required to encrypt the application program with the public 
key associated with the client computer Application /Builder 112. 

■ / 

Detailed Description Text (33) : 

In Step 316 the Application Builder 112 acting as an agent for the server 104 
(independent of connection between the server 104 and the client computer 102 at 
that time) verifies prior to execution of the program that the client computer is 
currently entitled to execute the Application Program. To perform this "control 
information" verification, the stored, doubly encrypted control information is 
decrypted using the Application Builder ' s 'private" key 113 and the server's public 
key 187 (and is optionally compared with the clear text version of the control 
information) . Using the decrypted control information, the Application Builder 
compares the licensee ID 184 in the Application Program with the licensee ID or IDs 
associated with the Application Builder, and compares the license termination date 
185 in the Application Program with the current date. Only when the status of the 
user is verified does the Application Builder 112 decrypt the encrypted Application 
Program so as to prepare it for execution. The decrypted Application Program is 
preferably never stored in non-volatile memory of the client computer, and only 
exists in decrypted form during actual program execution. 

Detailed Description Text (44): 

When the Application Builder has completed verification of the license, it decrypts 
the trial Application Program (Step 434) using the Application Builder's Private 
Key so that the program may be loaded for execution in the client computer CPU. As 
explained above, the stored, doubly encrypted control information is decrypted 
using the Application Builder's private key 113 and the server's public key 187 and 
then the decrypted control information is used to verify that user's rights to 
execute the trial application program. 

Detailed Description Text (46) : 

In this manner, the time during which the Application Program exists in a human 
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readable form is limited in time (during execution of the Application Program) and 
in storage location (in processor memory) . Limiting the time and physical location 
of unencrypted program code minimizes the opportunity for unauthorized copying of 
unencrypted code. Even if the encrypted program were to be copied, it cannot be 
used without a licensed Application Builder for that client computer, because the 
matching Application Builder's private key, which is unique for each client 
computer on which it is installed, is required for decryption . 



6. The method in claim 1, wherein said transmission version of said application 
program is encrypted with a public key associated with said user? and wherein said 
decryption is performed with a corresponding private key . 

13. The system in claim 11, wherein 

said transmission version of said application program is at least partially 
encrypted with a public key associated with said user, and wherein said program 
decoder decrypts said transmission version of said application program with a 
corresponding private key, and 

said user associated public key and corresponding private key are generated by said 
application builder module. 

15. The system in claim 10, wherein said transmission version of said application 
program is at least partially encrypted with a public key associated with said 
user, and wherein said program decoder decrypts said transmission version of said 
application program with a corresponding private key . 
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